CVE-2025-7181: code-projects Staff Audit System test.php unrestricted upload
A vulnerability, which was classified as critical, was found in code-projects Staff Audit System 1.0. Affected is an unknown function of the file /test.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7181?
CVE-2025-7181 is classified as a critical vulnerability.
How do I fix CVE-2025-7181?
To fix CVE-2025-7181, ensure proper validation and sanitization of the uploadedfile parameter in the /test.php file to prevent unrestricted file uploads.
What type of attack can be executed using CVE-2025-7181?
CVE-2025-7181 allows for remote attacks through unrestricted file uploads.
Which software is affected by CVE-2025-7181?
CVE-2025-7181 affects Code-projects Staff Audit System version 1.0.
Can CVE-2025-7181 be exploited remotely?
Yes, CVE-2025-7181 can be exploited remotely by manipulating the uploadedfile argument.